Privacy notice · KVKK / GDPR
What this site records
Very little, for a plain reason: to know whether anyone visits and which links they use.
This notice covers cemaltan.com.tr. It is written to meet the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Cemal Altan, Istanbul, Türkiye. Contact: i@cemaltan.com.tr.
What is recorded
When a page loads, a small first-party script sends one record to this site's own server:
- time
- When the page was viewed.
- IP address
- The address your request came from.
- approximate location
- Country, region and city, looked up from the IP address in an offline database stored on the server (IP Geolocation by DB-IP, licensed CC BY 4.0). Your IP address is not sent to anyone for this lookup.
- page and referrer
- Which page you opened and the page that linked you here, if your browser shares it.
- browser details
- User agent string, time zone, language and screen width, used for rough device statistics.
- visitor id
- A one-way hash of the IP address, user agent, date and a secret value. It changes every day and cannot be turned back into an IP address; it only lets the same day's visits be counted once.
- bot flag
- Whether the user agent looks like a crawler.
When you click a link that leaves this site (LinkedIn, GitHub, email, Ascendia) or opens the CV, the link, its label and the page are recorded with the same details.
What is not
- No cookies, local fingerprinting libraries or advertising identifiers.
- No third-party scripts, fonts, analytics or embeds. Every file comes from this server.
- Nothing is sold, shared for marketing or used to profile you.
Why, and on what legal basis
To understand basic reach (how many visits, from roughly where, through which links) and to spot abuse. The legal basis is legitimate interest: GDPR Article 6(1)(f) and KVKK Article 5(2)(f). The data collected is limited to what that purpose needs.
Opting out
If your browser sends Do Not Track or Global Privacy Control, the page does not send anything. Blocking JavaScript has the same effect; the site still works.
Where it is kept, and for how long
Records are stored in a database on the server that hosts this site, which runs on Google Cloud infrastructure. Only Cemal Altan can access them. Records older than 180 days are deleted automatically. Separately, the web server may keep standard technical logs for security and operations.
Your rights
Under KVKK Article 11 and GDPR Articles 15 to 21 you can ask whether data about you is processed, get a copy, have it corrected or deleted, restrict it, or object to its processing. Email i@cemaltan.com.tr. Including your IP address and the approximate time of your visit makes it possible to find the records. Requests are answered within 30 days.
You can also complain to the Personal Data Protection Authority of Türkiye (Kişisel Verileri Koruma Kurumu) or to the data protection authority where you live.
Last updated 1 November 2026.